ADM940

Authorization Concept for SAP

S/4HANA and SAP Business Suite

.
.
EXERCISES AND SOLUTIONS
.
Course Version: 20
Course Duration: 4 Hours 45 Minutes
Material Number: 50155934
SAP Copyrights, Trademarks and Disclaimers

© 2022 SAP SE or an SAP affiliate company. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company.
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries. Please see http://global12.sap.com/
corporate-en/legal/copyright/index.epx for additional trademark information and notices.
Some software products marketed by SAP SE and its distributors contain proprietary software components of other software
vendors.
National product specifications may vary.
These materials may have been machine translated and may contain grammatical errors or inaccuracies.
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or
warranty of any kind, and SAP SE or its affiliated companies shall not be liable for errors or omissions with respect to the materials.
The only warranties for SAP SE or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional
warranty.
In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation, or to develop or release any functionality mentioned therein. This document, or any related presentation,
and SAP SE’s or its affiliated companies’ strategy and possible future developments, products, and/or platform directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason without
notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, or
functionality. All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements, which
speak only as of their dates, and they should not be relied upon in making purchasing decisions.
Typographic Conventions

American English is the standard used in this handbook.

The following typographic conventions are also used.

This information is displayed in the instructor’s presentation

Demonstration

Procedure

Warning or Caution

Hint

Related or Additional Information

Facilitated Discussion

User interface control Example text

Window title Example text

© Copyright. All rights reserved. iii

Contents

Unit 1: Authorizations in General

1 Exercise 1: Create and Implement an Authorization Concept

Unit 2: Basic Terminology of Authorizations

11 Exercise 2: Display Authorization Information of the Authorization

Concept (ABAP)
19 Exercise 3: Check Authorization in the SAP System

Unit 3: User Settings

24 Exercise 4: Maintain and Evaluate User Data

Unit 4: Working with the Role Maintenance

33 Exercise 5: Maintain Role and Standard Roles

48 Exercise 6: Maintain Special ABAP Roles
64 Exercise 7: Understand the Subtleties of Authorization Maintenance

Unit 5: Basic Settings

73 Exercise 8: Install and Upgrade Role Maintenance

80 Exercise 9: Access Control and User Administration

Unit 6: Using Traces

93 Exercise 10: Troubleshoot and Administer Aids

96 Exercise 11: Use Authorization Trace

Unit 7: Transporting Authorizations

103 Exercise 12: Transport Authorization Components

Unit 8: Integration into the Company Landscape

106 Exercise 13: Work with Central User Administration

© Copyright. All rights reserved. iv

 Unit 1
Exercise 1
Create and Implement an Authorization
Concept

Business Example
This exercise should provide you with a brief impression of how you can create, structure, and
usefully implement a new authorization concept in a company. A prepared Microsoft Excel list
is provided for this purpose. It allows you to divide the user tasks into small reusable blocks
(roles).

Task 1: Access the Training System Landscape

Log in to your training landscape and log on to your training system.

1. Log in to your Training Landscape

2. Log on to the SAP GUI on the training system T41 as user ADM940-##.

Task 2: Start the Initialize Course Script and Open the Authorization List
Start the Initialize Course script and open the Excel file AL-ADM940-EN.XLS or AL-ADM940-
DE.xls.

1. Start the Initialize Course script.

The Excel files AL-ADM940-EN.XLS and AL-ADM940-DE.xls are copied to N:\Documents
\ADM940_20.

2. Open the Excel file AL-ADM940-EN.XLS or AL-ADM940-DE.xls.

For the Excel file, you can choose:

The English version: AL-ADM940-EN.XLS

The German version: AL-ADM940-DE.xls.

Task 3: Explore the Authorization List

Use the Excel file GR##_AL-ADM940.xls. to answer the following questions.

1. Which master data is used by the company at Scenario Level, and should be used in the
job roles (Level 3, Column C)?
Master data for:
_________________________ and _________________________

2. Which business processes (Level 5, Column E) should be taken into account for assigning
authorizations and were included in the Microsoft Excel list?
______________________________________________________
______________________________________________________
______________________________________________________
______________________________________________________

3. Which transaction codes were copied for the business process sales order processing?

© Copyright. All rights reserved. 1

Unit 1: Authorizations in General

____________________
____________________
____________________
____________________

Task 4: Define the Roles for the Enterprise Areas

In the following steps (step 1- 5), define the roles for the enterprise areas:
● Financial Accounting (FI)
● Sales and Distribution (SD)
● Materials Management (MM)

Then, assign transactions to these roles. If you are not experienced in the areas in question,
and you are not sure which transactions to use, use the solution as a guideline.
The following table contains the solutions to steps 1- 5:

Table 1: Sample Authorization Concept

Business area>>> FI SD SD MM
Work Place Description>>> AccRec SDClerk SDMan Whouse
SAP R/3 Links: Scope Scope Scope Scope
T Code

MM01
MM02
MM03 x x x x
MM19 x x x x
MM04 x x x x

FD01 x x
FD02 x x
FD03 x x
VD01 x x
VD02 x x
VD03 x x

VA21 x x
VA22 x x
VA23 x x
VA25 x x

VA01 x x
VA02 x x

© Copyright. All rights reserved. 2

 Exercise 1: Create and Implement an Authorization Concept

Business area>>> FI SD SD MM
Work Place Description>>> AccRec SDClerk SDMan Whouse
SAP R/3 Links: Scope Scope Scope Scope
T Code

VA03 x x
V.01 x x

MB1C x
MB90 x
VL21 x

F-18 x
F-26 x
F-28 x

1. Create the FI Enterprise Area.

Create the job role for an Accounts Receivable Accountant (AccRec, FI).

2. Create the SD Enterprise Area.

Define a job role for a Sales and Distribution clerk (SDClerk, SD).

3. Create the SD Enterprise Area.

Define a job role for the Sales and Distribution manager (SDMan, SD).

4. Create the MM Enterprise Area.

Define a job role for a Warehouse Supervisor (Whouse, MM) for the MM enterprise area.

5. Add transactions MM03, MM04, and MM19 for displaying material master data for all job
roles.

Task 5: Generate an Overview of the Transactions and Roles

Switch to the Microsoft Excel list on the second worksheet T Codes for each Role. Generate an
overview of the transactions and roles by pressing the appropriate button. Do you remember
them?

1. How many transactions were chosen for the individual roles:

AccRec: ____________ Transactions
SDClerk ____________ Transactions
SDMan ____________ Transactions
Whouse ____________ Transactions

Task 6: Combine the Transactions into Meaningful Roles

Now combine these transactions into meaningful roles to ensure that these single roles can
be reused in several composite roles.

© Copyright. All rights reserved. 3

Unit 1: Authorizations in General

Hint:
There are several ways to do this.
Do not worry if your solution is not the same as your neighbor's. The solutions
will vary from group to group.

Go back to the first worksheet “Roles Design - scope”.

1. Combine several transactions into roles in such a way that these single roles can be
reused in several composite roles. To do this, you can color code the roles or draw a
border around them.

2. Give the roles meaningful names and enter the associated transactions in the following
table. Compare the names that you have given the roles with the suggestions in the
solution. Which naming convention do you use in your company?
Name of the Role Transactions for this Role

© Copyright. All rights reserved. 4

 Unit 1
Solution 1
Create and Implement an Authorization
Concept

Business Example
This exercise should provide you with a brief impression of how you can create, structure, and
usefully implement a new authorization concept in a company. A prepared Microsoft Excel list
is provided for this purpose. It allows you to divide the user tasks into small reusable blocks
(roles).

Task 1: Access the Training System Landscape

Log in to your training landscape and log on to your training system.

1. Log in to your Training Landscape

a) Follow the guidance of your instructor.

2. Log on to the SAP GUI on the training system T41 as user ADM940-##.
a) Start SAP Logon.

b) Select system T41 and choose Log On.

c) Enter ADM940-## in the User field.

d) Enter the initial password Welcome1 in the Password field.

e) Enter your log-on language (EN or DE) in the Language field.

f) Choose Enter.

g) Enter a password of your choice in the New Password and the Repeat Password fields.

h) Choose Transfer (Enter).

i) Choose Continue (Enter).

Task 2: Start the Initialize Course Script and Open the Authorization List
Start the Initialize Course script and open the Excel file AL-ADM940-EN.XLS or AL-ADM940-
DE.xls.

1. Start the Initialize Course script.

a) Select Windows start button and select the Initialize Course Folder.

b) Open the folder ADM.

c) Double-click the script Initialize_ADM940_20.vbs.

d) Choose Yes on the Initialize ADM940_20 window.

e) When the script finishes, choose OK in the Initialize ADM940_20 window.

© Copyright. All rights reserved. 5

Unit 1: Authorizations in General

The Excel files AL-ADM940-EN.XLS and AL-ADM940-DE.xls are copied to N:\Documents

\ADM940_20.

2. Open the Excel file AL-ADM940-EN.XLS or AL-ADM940-DE.xls.

For the Excel file, you can choose:

The English version: AL-ADM940-EN.XLS

The German version: AL-ADM940-DE.xls.

a) In the Microsoft Windows start menu, start File Explorer.

b) Go to directory N:\Documents\ADM940_20.

c) Open the Excel file AL-ADM940-EN.XLS or AL-ADM940-DE.xls.

d) In the security warning appears that appears, choose Enable Content.

e) If the error message Library Bpml.dll could not be found! appears when opening the
Excel file, you can ignore it by choosing OK.

f) If a Security Warning popup like: Do you want to make this file a Trusted Document
appears, choose Yes.

g) Save the Microsoft Excel to the same folder that has the file name GR##_AL-
ADM940.xls..

Task 3: Explore the Authorization List

Use the Excel file GR##_AL-ADM940.xls. to answer the following questions.

1. Which master data is used by the company at Scenario Level, and should be used in the
job roles (Level 3, Column C)?
Master data for:
_________________________ and _________________________
a) Master Data/General Master Data for
Material master and customer master records

2. Which business processes (Level 5, Column E) should be taken into account for assigning
authorizations and were included in the Microsoft Excel list?
______________________________________________________
______________________________________________________
______________________________________________________
______________________________________________________
a) Customer quotation processing
Sales order processing
Goods receipt processing
Manual incoming payments

3. Which transaction codes were copied for the business process sales order processing?
____________________
____________________
____________________

© Copyright. All rights reserved. 6